#1API key scanning, credential leak detection, and secret management tools.
Kitploit recommended
snyk/cliSnyk CLI scans and monitors your projects for security vulnerabilities.
devsecops/awesome-devsecopsAn authoritative list of awesome devsecops tools with the help from community experiments and contributions.
awslabs/git-secretsPrevents you from committing secrets and credentials into git repositories
awarexone/agentic-bug-hunterAI-powered bug bounty hunting toolkit that works with or without subscription.
bee-san/pywhat🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…
zizmorcore/zizmorStatic analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…
nolabs-ai/nonoagent runtime security - zero trust, zero setup, zero latency agent sandboxing
agwa/git-cryptTransparent file encryption in git
99designs/aws-vaultA vault for securely storing and accessing AWS credentials in development environments
deepfence/threatmapperOpen Source Cloud Native Application Protection Platform (CNAPP)
onecli/onecliOpen-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
checkmarx/kicsStatic analysis scanner for infrastructure-as-code that detects security vulnerabilities, compliance violations, and misconfigurations across…
edoardottt/cariddiTake a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
moltis-org/moltisA secure persistent personal agent server in Rust. One binary, sandboxed execution, multi-provider LLMs, voice, memory, Telegram, WhatsApp, Discord,…
snyk/agent-scanSecurity scanner for AI agents, MCP servers and agent skills.
techgaun/github-dorksFind leaked secrets via github search
dwisiswant0/apkleaksScanning APK file for URIs, endpoints & secrets.
proviesec/google-dorksUseful Google Dorks for WebSecurity and Bug Bounty
